example.apko.yaml

# this is just a BASIC example of the possibilites of apko
contents:
  # this is just a template example, please DO NOT mix Wolfi and Alpine packages 
  keyring:
    - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
    # - https://packages.cgr.dev/os/chainguard-enterprise.rsa.pub
    # - https://packages.cgr.dev/os/chainguard-os.rsa.pub
    - https://packages.cgr.dev/extras/chainguard-extras.rsa.pub
  repositories:
    - https://dl-cdn.alpinelinux.org/alpine/edge/main
    # - https://packages.cgr.dev/os
    - https://packages.cgr.dev/extras
  packages:
    - alpine-baselayout
    - nginx
    # Chainguard Enterprise
    # - chainguard-baselayout

entrypoint:
  type: service-bundle
  services:
    nginx: /usr/sbin/nginx -c /etc/nginx/nginx.conf -g "daemon off;"

# optional
cmd: --help

stop-signal: SIGQUIT

work-dir: /usr/share/nginx

accounts:
  groups:
    - groupname: nginx
      gid: 10000
  users:
    - username: nginx
      uid: 10000
      shell: /bin/sh
  run-as: nginx

# optional environment configuration
environment:
  PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt

# optional path mutations
paths:
  - path: /run/nginx
    type: directory
    uid: 10000
    gid: 10000
    permissions: 0o755
  - path: /etc/nginx/http.d/default.conf
    type: hardlink
    source: /usr/share/nginx/http-default_server.conf
    uid: 10000
    gid: 10000
    permissions: 0o644

archs:
 - amd64
 - arm64

annotations:
  foo: bar
  bar: baz

# even though not recommended you can override OS release details
# most likely DEPRECATED
os-release:
  id: alpine
  version-id: '3.24.0'
  name: 'Alpine Slim'
  pretty-name: 'Alpine Slim (apko)'
  home-url: example.com
  bug-report-url: bugs.com